use-vault-and-capital
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
ticketfairypackage via NPM and connects to an MCP server athttps://www.ticketfairy.com/docs/mcpto retrieve documentation and tools. These resources are provided by the official vendor. - [COMMAND_EXECUTION]: The agent is instructed to use the
ticketfairycommand-line interface to perform financial operations, such as listing brands and checking balances. The instructions emphasize using the--read-onlyflag unless changes are explicitly requested and approved by the user. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external guides and search results via MCP tools (
search_guides,get_guide). This creates an attack surface where instructions embedded in the guides could influence agent behavior. * Ingestion points: MCP tool outputs fromsearch_guidesandget_guide(SKILL.md). * Boundary markers: Explicit instructions to "Read it before you act", "Follow those steps; do not guess", and "Keep secrets out of the chat" (SKILL.md). * Capability inventory: Execution ofticketfairyCLI commands and generation of prompts for the "Fai" dashboard assistant (SKILL.md). * Sanitization: Instructions to use specific brand identifiers and follow the exact steps provided in the guides rather than interpreting freely (SKILL.md).
Audit Metadata